Adobe Acrobat Reader local files access

By using XML External Entity document script can access local files and have them sent to remote site...

CVE-2005-0464

The CVE concerns SGI IRIX gr_osview (6.5.x, including 6.5.22) which does not drop privileges when opening user-specified description files in debug mode. Local attackers can read a line from arbitrary files by using -d and -D, which prints the line as a formatting error. The core issue is an info...

CVE-2005-0588

Firefox before 1.0.1 and Mozilla before 1.7.6 does not restrict xsl:include and xsl:import tags in XSLT stylesheets to the current domain, which allows remote attackers to determine the existence of files on the local system...

CVE-2005-0259

phpBB 2.0.11, and possibly other versions, with remote avatars and avatar uploading enabled, allows local users to read arbitrary files by providing both a local and remote location for an avatar, then modifying the "Upload Avatar from a URL:" field to reference the target file...

CitrusDB 0.3.6 - Arbitrary Local PHP File Inclusion

CitrusDB 0.3.6 - Arbitrary Local PHP File Inclusion source: https://www.securityfocus.com/bid/12564/info CitrusDB is reportedly affected by a vulnerability that permits the inclusion of any local PHP file. This issue is due to the application failing to properly sanitize user-supplied input. This...

GLSA-200501-03 : Mozilla, Firefox, Thunderbird: Various vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200501-03 Mozilla, Firefox, Thunderbird: Various vulnerabilities Maurycy Prodeus from isec.pl found a potentially exploitable buffer overflow in the handling of NNTP URLs. Furthermore, Martin from ptraced.net discovered that...

[Full-Disclosure] iDEFENSE Security Advisory 02.10.05: IBM AIX lspath Local File Access Vulnerability

IBM AIX lspath Local File Access Vulnerability iDEFENSE Security Advisory 02.10.05 www.idefense.com/application/poi/display?id=195&type=vulnerabilities February 10, 2005 I. BACKGROUND The lspath program is a setuid root application, installed by default under newer versions of IBM AIX. It is used...

CVE-2005-0184

Directory traversal vulnerability in ftpfile in the Vacation plugin 0.15 and earlier for Squirrelmail allows local users to read arbitrary files via a .. dot dot in a get request...

CVE-2005-0072

zhcon before 0.2 does not drop privileges before reading a user configuration file, which allows local users to read arbitrary files...

fkey[v0.0.2]: local/remote file accessibility exploit.

nothing major, just killing some time and strolled across this project on freshmeat. original version: http://fakehalo.us/xfkey.c --------------------- exploit: xfkey.c ---------------------- / fkeyv0.0.2: local/remote file accessibility exploit. by: vade79/v9 [email protected] fakehalo/realhalo...

fkey 0.0.2 - Local File Accessibility

fkey 0.0.2 - Local File Accessibility / fkeyv0.0.2: local/remote file accessibility exploit. by: vade79/v9 [email protected] fakehalo/realhalo netris homepage/URL: http://www.freshmeat.net/projects/fkey compile: gcc xfkey.c -o xfkey syntax: ./xfkey /etc/shadow 2/savefilename bug: fkey is a finger-li...

fkey 0.0.2 - Local File Accessibility

/ fkeyv0.0.2: local/remote file accessibility exploit. by: vade79/v9 [email protected] fakehalo/realhalo netris homepage/URL: http://www.freshmeat.net/projects/fkey compile: gcc xfkey.c -o xfkey syntax: ./xfkey /etc/shadow 2/savefilename bug: fkey is a finger-like daemon for accessing remote files i...

CVE-2005-0119

helvis 1.8h21 and earlier allows local users to recover and read the files of other users via the elvrec setuid program...

CVE-2004-2419

Keene Digital Media Server 1.0.2 allows local users to obtain usernames and passwords by reading the dmscore.db file on the local system...

Multiple bwosers Java privilege escalation

It's possible to access local files...

PHP+cURL local file access protection bypass

It's possible to address any local file by file:// URL...

PT-2004-2511 · Cpanel · Cpanel

Name of the Vulnerable Software and Affected Versions: cPanel version 9.4.1-RELEASE-64 Description: The issue allows local users to read arbitrary files via the backup feature or chown arbitrary files via the .htaccess file when Front Page extensions are enabled or disabled. This is due to the...

Local file access and code execution in Microsoft Internet Explorer and Netscape/Mozilla XML component

Microsoft's Microsoft.XMLHTTP and Mozilla XMLHttpRequest incorrectly handle redirection allowing to access local files...

Debian DSA-346-1 : phpsysinfo - directory traversal

Albert Puigsech Galicia reported that phpsysinfo, a web-based program to display status information about the system, contains two vulnerabilities which could allow local files to be read, or arbitrary PHP code to be executed, under the privileges of the web server process usually www-data. These...

BlackICE unprivileged local user attack

Pimp industries. "Its all about the Bling, B^!@s and Fame!" BlackICE PC protection / Server Protection Tested on version v3.6.cno Unprivileged local user disabling anyone from using BlackICE C Paul Craig - Pimp Industries 2004 Background ------------- Blackice is a firewall developed by ISS,...